Jump to content

Potential Database Breach


Dark0ne

Recommended Posts

In response to post #31611950.


Trollenstein wrote: K, so I can't log into the forums and I don't know why. Login goes smoothly but it says "Sign in", and I'm signed into nexusmods.com obviously. No idea what's going on there.


There's no statement on whether or not all files are clean on the Nexus. Whether or not existing mods have been compromised. Whether or not the site is safe to use at all. That's a problem. I'm about ready to delete GBs of mod zips and rars, do a clean game install because of this issue alone, but I think I'm done using NMM and Nexusmods.com, likely indefinitely. Based on how the NMM software behaves, how it has been behaving, and how the "security firm" Nexusmods.com is paying $60,000 a year to keep the site safe let something go through is disconcerting. Virustotal is missing files as well, so that isn't even a legitimate way of saying "Hey guys, this mod is safe. No worries!" anymore.

I doubt more money will be coming as this news is bad regardless of your outlook on the future, so the security level may stay the same and it's already been broken through once, meaning there *will* be a 'next time'. If funding slows down then the security slips a bit more. Suddenly the site is no longer usable the moment people say "No thanks, I'll pass." en masse, and it looks like people are already saying that.




I'm not attempting to be a fearmongering hater. I like nexusmods and want to use mods. But based on how often I use this site and these mods, it's not worth it. I think I'm done and recommend others jump ship as well.. Purely because the site, without even considering any reduction of funding by users, is teetering on that edge of safe and unsafe. It's time to pack it up until the admins sort this s#*! out in a big way.


Like I said, gigabytes of data on my PC from this site have to be removed because of this problem, and the liability of things going south again is even higher because of this news. This is likely the last time I use the site.


Well I know I'm not paying for a premium membership any more since it obviously isn't helping the security of my account.

Thankfully I've only used NMM once for an Oblivion mod that required it. I always manually download and scan all my files myself. I don't trust their virus scanner.

Not even the password change page is secured. I didn't notice that till today. Not happy. I was almost hit with a virus when a few big Skyrim mods were hacked.

Glad I don't play Fallout. And all my passwords are strong and stored externally. I still changed mine here anyway and looks I'll spend the next couple of hours changing all my others.

Link to comment
Share on other sites

  • Replies 365
  • Created
  • Last Reply

Top Posters In This Topic

Top Posters In This Topic

In response to post #31611950. #31612905 is also a reply to the same post.


Trollenstein wrote: K, so I can't log into the forums and I don't know why. Login goes smoothly but it says "Sign in", and I'm signed into nexusmods.com obviously. No idea what's going on there.


There's no statement on whether or not all files are clean on the Nexus. Whether or not existing mods have been compromised. Whether or not the site is safe to use at all. That's a problem. I'm about ready to delete GBs of mod zips and rars, do a clean game install because of this issue alone, but I think I'm done using NMM and Nexusmods.com, likely indefinitely. Based on how the NMM software behaves, how it has been behaving, and how the "security firm" Nexusmods.com is paying $60,000 a year to keep the site safe let something go through is disconcerting. Virustotal is missing files as well, so that isn't even a legitimate way of saying "Hey guys, this mod is safe. No worries!" anymore.

I doubt more money will be coming as this news is bad regardless of your outlook on the future, so the security level may stay the same and it's already been broken through once, meaning there *will* be a 'next time'. If funding slows down then the security slips a bit more. Suddenly the site is no longer usable the moment people say "No thanks, I'll pass." en masse, and it looks like people are already saying that.




I'm not attempting to be a fearmongering hater. I like nexusmods and want to use mods. But based on how often I use this site and these mods, it's not worth it. I think I'm done and recommend others jump ship as well.. Purely because the site, without even considering any reduction of funding by users, is teetering on that edge of safe and unsafe. It's time to pack it up until the admins sort this s#*! out in a big way.


Like I said, gigabytes of data on my PC from this site have to be removed because of this problem, and the liability of things going south again is even higher because of this news. This is likely the last time I use the site.
akparkison wrote: Well I know I'm not paying for a premium membership any more since it obviously isn't helping the security of my account.

Thankfully I've only used NMM once for an Oblivion mod that required it. I always manually download and scan all my files myself. I don't trust their virus scanner.

Not even the password change page is secured. I didn't notice that till today. Not happy. I was almost hit with a virus when a few big Skyrim mods were hacked.

Glad I don't play Fallout. And all my passwords are strong and stored externally. I still changed mine here anyway and looks I'll spend the next couple of hours changing all my others.


One of the biggest problems of today's world is people making statements before they collect all the relevant facts.

I suggest patience ... and the use of an up to date virus scanner.
Link to comment
Share on other sites

Thanks for letting us know,don't think there was an hack as any decent one would have targeted different mods for instance with Fallout 4 the popular SweetFX or Adult mods.

It being 3 different authors is kinda suspicious though but just think if they had that level of access more mods would have been affected or at least more popular ones.

 

Link to comment
Share on other sites

In response to post #31608660. #31613755 is also a reply to the same post.


turoktony wrote: I always wondered why humans are such a destructive species. A bunch of people make a really cool thing, and suddenly some other people come along and do their best to ruin it for everyone...
FrostByghte wrote: With you here 100%.


I wouldn't give them that much credit.

Solipsism is destructive, yes, but people being too lazy to look beyond their own immediate gain is what I think gets us in trouble (and it's probably what makes westerners, in particular, such lousy Go players)
Link to comment
Share on other sites

In response to post #31611950. #31612905, #31613765 are all replies on the same post.


Trollenstein wrote: K, so I can't log into the forums and I don't know why. Login goes smoothly but it says "Sign in", and I'm signed into nexusmods.com obviously. No idea what's going on there.


There's no statement on whether or not all files are clean on the Nexus. Whether or not existing mods have been compromised. Whether or not the site is safe to use at all. That's a problem. I'm about ready to delete GBs of mod zips and rars, do a clean game install because of this issue alone, but I think I'm done using NMM and Nexusmods.com, likely indefinitely. Based on how the NMM software behaves, how it has been behaving, and how the "security firm" Nexusmods.com is paying $60,000 a year to keep the site safe let something go through is disconcerting. Virustotal is missing files as well, so that isn't even a legitimate way of saying "Hey guys, this mod is safe. No worries!" anymore.

I doubt more money will be coming as this news is bad regardless of your outlook on the future, so the security level may stay the same and it's already been broken through once, meaning there *will* be a 'next time'. If funding slows down then the security slips a bit more. Suddenly the site is no longer usable the moment people say "No thanks, I'll pass." en masse, and it looks like people are already saying that.




I'm not attempting to be a fearmongering hater. I like nexusmods and want to use mods. But based on how often I use this site and these mods, it's not worth it. I think I'm done and recommend others jump ship as well.. Purely because the site, without even considering any reduction of funding by users, is teetering on that edge of safe and unsafe. It's time to pack it up until the admins sort this s#*! out in a big way.


Like I said, gigabytes of data on my PC from this site have to be removed because of this problem, and the liability of things going south again is even higher because of this news. This is likely the last time I use the site.
akparkison wrote: Well I know I'm not paying for a premium membership any more since it obviously isn't helping the security of my account.

Thankfully I've only used NMM once for an Oblivion mod that required it. I always manually download and scan all my files myself. I don't trust their virus scanner.

Not even the password change page is secured. I didn't notice that till today. Not happy. I was almost hit with a virus when a few big Skyrim mods were hacked.

Glad I don't play Fallout. And all my passwords are strong and stored externally. I still changed mine here anyway and looks I'll spend the next couple of hours changing all my others.

RealmEleven wrote: One of the biggest problems of today's world is people making statements before they collect all the relevant facts.

I suggest patience ... and the use of an up to date virus scanner.


Every site can be hacked with enough time be it human error or social engineering and them finding out and being open is actually a good thing which others rarely do.
Nexus has been always very open open in general and actually improving the site and the mod manager with the last few releases are a nice improvements.
It's not like they sit on their hands all day and security is normally an after thought but considering the impact a significant breach can have it's good they invest heavily in it.

Just because they might have an potential breach doesn't mean people should avoid it as we have no confirmation with only a few mods that had suspicious files.
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.

×
×
  • Create New...